$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4457acf9-1576-3482-a1c8-00949efadb0d.roa File: 4457acf9-1576-3482-a1c8-00949efadb0d.roa (raw, json) Hash identifier: hjWRhcdXjoUZmotaAo/Yc9FB1wjRbUrbURz3TUlyypY= Subject key identifier: 57:57:9B:40:00:83:18:CD:5F:82:4D:D0:8B:44:38:DD:F4:EF:1D:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FB3DB2BF7A575FD8D160 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4457acf9-1576-3482-a1c8-00949efadb0d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.172.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fb:3d:b2:bf:7a:57:5f:d8:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=24a32d5c-47b9-448a-a7ac-d4dbc101484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:96:42:b3:6e:15:8e:6c:c3:66:b5:65:ee: 72:10:63:f2:4d:e9:e1:ed:a8:0c:3a:d0:97:e1:da: cf:de:8b:98:7c:f4:e0:e4:46:49:03:bd:5b:b1:23: 07:3b:ed:dd:b1:79:d6:a2:34:32:6e:a3:e7:fe:08: 28:68:81:3d:3a:08:e2:30:5d:15:43:af:50:92:18: 08:a1:18:22:0d:56:02:ee:ec:56:90:9a:03:13:f8: 72:e6:72:2d:dd:19:65:a6:12:5b:d3:3f:1e:92:73: 04:3c:c4:d3:50:71:ed:ee:f2:63:fc:d1:5d:13:15: 91:f2:b2:7c:35:84:74:f3:74:5e:42:aa:83:26:05: 86:87:3c:0f:f4:da:c1:da:15:22:de:3c:70:6b:04: 89:95:86:f1:c6:40:f2:2e:91:16:aa:77:00:26:50: 5e:c5:7a:8a:ca:b6:28:aa:e3:45:ba:95:24:c3:9c: 93:73:a7:95:81:ed:f3:a3:ca:b4:5e:5f:5f:be:9f: ca:00:14:b0:1d:ae:8c:b3:f5:0f:95:d7:84:b4:3c: 95:08:de:9c:bb:44:a0:e8:99:2a:b4:64:2b:6a:6c: 4c:9d:5a:32:47:f7:a8:f2:a1:46:d9:18:23:04:30: 1a:35:13:97:60:c7:db:23:40:76:e9:26:13:7d:28: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:9B:40:00:83:18:CD:5F:82:4D:D0:8B:44:38:DD:F4:EF:1D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4457acf9-1576-3482-a1c8-00949efadb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f9:f4:f8:a6:67:67:64:ce:74:39:4d:65:23:67:7d:30:90: a6:bb:61:c8:9f:1b:d4:2a:e6:3f:82:62:a5:44:28:bc:f4:2a: 25:e8:2a:e6:82:bc:47:ad:a3:5c:a5:41:2f:9a:4c:24:e7:6e: 16:53:4a:ae:20:0a:1d:6e:69:08:b9:27:23:6d:d7:c3:10:09: 26:af:f4:86:90:be:a5:2b:d4:41:6f:be:7d:c4:de:e3:7d:1a: f8:9f:9b:80:da:70:c8:73:08:ec:57:c0:d0:02:5e:84:ff:de: 1b:94:5f:60:cf:5d:fd:2d:d1:d2:07:43:46:ef:34:ab:39:e5: 09:75:60:a5:26:91:fc:e1:1d:02:19:88:e9:31:70:a4:7e:e7: 87:85:eb:2c:15:88:da:35:0b:c1:ba:9a:38:05:00:9c:05:1e: 2f:98:97:01:4c:81:bc:ef:c7:65:9d:55:d8:74:8c:b7:e0:c7: 6e:6a:4f:53:e3:a0:c2:d0:0d:cd:7d:af:16:fd:02:78:46:a0: 19:ce:e9:9c:e4:af:67:67:35:86:9c:67:36:fa:2b:dd:fa:f7: 2e:1c:f1:32:bb:73:e8:cb:13:b2:92:ed:63:80:08:09:c7:7e: fb:f1:c4:8f:b6:ff:e8:23:02:3a:44:1b:65:93:f1:4e:d0:f9: f2:35:5a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPs9sr96V1/Y0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjRhMzJkNWMtNDdiOS00NDhhLWE3YWMtZDRkYmMxMDE0ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/SWQrNuFY5sw2a1Ze5yEGPyTenh7agMOtCX 4drP3ouYfPTg5EZJA71bsSMHO+3dsXnWojQybqPn/ggoaIE9OgjiMF0VQ69QkhgI oRgiDVYC7uxWkJoDE/hy5nIt3RllphJb0z8eknMEPMTTUHHt7vJj/NFdExWR8rJ8 NYR083ReQqqDJgWGhzwP9NrB2hUi3jxwawSJlYbxxkDyLpEWqncAJlBexXqKyrYo quNFupUkw5yTc6eVge3zo8q0Xl9fvp/KABSwHa6Ms/UPldeEtDyVCN6cu0Sg6Jkq tGQramxMnVoyR/eo8qFG2RgjBDAaNROXYMfbI0B26SYTfSjr4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdXm0AAgxjNX4JN0ItEON307x3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDQ1N2FjZjktMTU3Ni0z NDgyLWExYzgtMDA5NDllZmFkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2KwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj59PimZ2dkznQ5TWUjZ30wkKa7YcifG9Qq5j+CYqVEKLz0KiXoKuaC vEeto1ylQS+aTCTnbhZTSq4gCh1uaQi5JyNt18MQCSav9IaQvqUr1EFvvn3E3uN9 Gvifm4DacMhzCOxXwNACXoT/3huUX2DPXf0t0dIHQ0bvNKs55Ql1YKUmkfzhHQIZ iOkxcKR+54eF6ywViNo1C8G6mjgFAJwFHi+YlwFMgbzvx2WdVdh0jLfgx25qT1Pj oMLQDc19rxb9AnhGoBnO6Zzkr2dnNYacZzb6K9369y4c8TK7c+jLE7KS7WOACAnH fvvxxI+2/+gjAjpEG2WT8U7Q+fI1Wuk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:57 2025 by rpki-client